Our Approach
Eashgroup is a small, focused operation — our security approach is proportionate to what we actually handle: a public informational website, and a restricted internal portal with no financial or highly sensitive customer data. We favor real, verifiable protections over box-ticking, and we're straightforward here about what is and isn't in place.
How the Public Site Is Protected
TransportEvery page on eashgroup.com is served exclusively over HTTPS/TLS via Firebase Hosting. There is no unencrypted (HTTP) version of the site.
Contact formSubmissions are sent through a dedicated email delivery provider — the site itself never stores or has a database of your messages.
HostingThe site runs entirely on Google's Firebase Hosting infrastructure, with automatic SSL certificate management and DDoS-resistant edge delivery.
Reporting a Security Issue
If you believe you've found a genuine security vulnerability affecting eashgroup.com or portal.eashgroup.com, please tell us before disclosing it publicly. Send details through the contact form, marking your message as a security report, and we'll follow up directly.
Changes to This Page
We'll update this page as our practices evolve. It reflects our actual current setup rather than a fixed policy document.